$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.mft File: RG-vkjvrr5Y1cof-JQmRx1SRRU0.mft (raw, json) Hash identifier: I6Bn4MXKkP/6PxaBraJHcxdIRqpkRma8w9o4yIJocTM= Subject key identifier: FB:69:E7:59:2A:19:06:4F:85:D2:F3:C5:B1:54:7B:00:93:98:D4:8C Authority key identifier: 44:6F:AF:92:3B:EB:AF:96:35:72:87:FE:25:09:91:C7:54:91:45:4D Certificate issuer: /CN=A91FF1CC/serialNumber=446FAF923BEBAF96357287FE250991C75491454D Certificate serial: 90 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RG-vkjvrr5Y1cof-JQmRx1SRRU0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.mft Manifest number: 8A Signing time: Mon 03 Nov 2025 06:39:45 +0000 Manifest this update: Mon 03 Nov 2025 06:39:44 +0000 Manifest next update: Mon 10 Nov 2025 06:39:44 +0000 Files and hashes: 1: RG-vkjvrr5Y1cof-JQmRx1SRRU0.crl (hash: ZpypsGokHEsm+/PUjbDCEY/XloN+bMAxkJShktINdaw=) 2: 1ED36EFC590C11F0913BCB35C4F9AE02.roa (hash: WTYmLvNpyq/A5Kbra5mtKRBFCjY1e4fS3rGmshvrNGY=) 3: B7E221E4024311F0BD990F64C4F9AE02.roa (hash: d1zImNClufU6mQa0qsoJOx/6gPAzww6pSPXhwifVLOo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.crl rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RG-vkjvrr5Y1cof-JQmRx1SRRU0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:39:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 144 (0x90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF1CC, serialNumber=446FAF923BEBAF96357287FE250991C75491454D Validity Not Before: Nov 3 06:39:44 2025 GMT Not After : Nov 10 06:39:44 2025 GMT Subject: CN=69084e30-6c6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c4:d6:67:58:46:b1:14:b9:bf:98:b9:a1:0f: 41:b0:80:23:1e:08:0f:57:56:24:26:64:76:32:ed: 4d:48:79:bd:c6:b3:ea:09:04:5c:95:bd:30:ae:9b: 88:d0:73:ec:ec:e4:4a:6b:66:07:01:5e:80:5b:24: 4a:fe:b0:cf:b5:28:fb:a2:a6:3c:05:c3:df:d0:62: c0:00:e3:49:b3:55:55:45:e0:91:c0:83:1c:24:f9: ed:28:95:2c:b0:2c:12:9f:95:fa:8b:c7:54:7f:f7: c9:04:8c:f8:e5:d9:af:42:0e:e5:0d:fd:f7:aa:a9: 7e:9f:4b:20:d7:a0:24:ca:ce:3f:2e:b4:a0:d2:7d: 67:77:da:d7:4a:1a:88:cb:f3:4f:a1:43:62:e2:55: 52:2e:d5:7c:38:ab:23:95:9d:b6:b3:04:a5:a2:70: e6:ce:73:83:a4:6d:4c:37:1f:75:47:9b:ce:48:1e: 0e:96:14:d2:a8:a4:49:bc:4d:99:a7:4f:9d:1e:25: ce:33:fa:8b:b5:5c:44:1b:aa:23:e0:01:78:c8:ec: f3:49:ee:0c:be:9a:ff:8d:07:3b:f7:3f:f6:75:48: 9c:e8:2d:4e:e0:e9:9e:05:a8:a4:51:43:99:ac:c9: b6:94:b3:db:4b:b6:50:b1:9d:58:c8:fb:1b:ae:07: 85:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:69:E7:59:2A:19:06:4F:85:D2:F3:C5:B1:54:7B:00:93:98:D4:8C X509v3 Authority Key Identifier: keyid:44:6F:AF:92:3B:EB:AF:96:35:72:87:FE:25:09:91:C7:54:91:45:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RG-vkjvrr5Y1cof-JQmRx1SRRU0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:2f:16:33:0a:90:b9:4f:69:69:9b:2a:04:54:09:44:77:b6: a4:67:4e:ef:d8:fb:be:46:d0:fe:af:f0:1b:fe:a6:a4:5f:4b: dd:d7:47:15:01:ea:d1:44:d4:3a:9e:c2:c8:69:7e:06:34:f8: da:f7:95:4f:c9:d6:61:1b:66:77:21:13:6c:e6:e9:b3:2b:9c: f7:9a:b0:79:52:99:30:dd:70:bd:a2:fe:97:3e:fa:40:10:b7: f8:65:95:16:91:f4:c2:5c:88:a6:24:41:26:13:c1:f1:50:4f: 61:f7:a5:80:d3:78:a9:87:46:79:d4:5a:cd:2b:62:c9:58:c2: 3d:05:1b:65:9f:0e:cb:67:d1:33:24:29:3b:76:d3:01:1f:76: dc:49:b3:82:d5:fe:e9:df:23:32:ce:d2:da:b7:8a:0d:7c:09: e0:8e:6f:b2:8f:17:34:46:d0:56:ef:b1:de:00:0f:f7:7a:51: 23:92:5a:7e:0f:70:bd:04:9a:2f:7a:5f:0a:8a:81:a6:02:7a: 32:21:19:03:87:dd:78:21:2d:02:4d:02:a6:39:48:e7:97:58: a0:8f:a1:44:20:6b:a5:cb:ec:57:6f:c9:4a:a3:3c:e1:5c:81: 51:a7:d8:f1:b0:48:f8:80:36:34:fb:31:ca:85:e2:10:db:f4: b3:92:dd:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkYxQ0MxMTAvBgNVBAUTKDQ0NkZBRjkyM0JFQkFGOTYzNTcyODdGRTI1MDk5MUM3 NTQ5MTQ1NEQwHhcNMjUxMTAzMDYzOTQ0WhcNMjUxMTEwMDYzOTQ0WjAYMRYwFAYD VQQDEw02OTA4NGUzMC02YzZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp8TWZ1hGsRS5v5i5oQ9BsIAjHggPV1YkJmR2Mu1NSHm9xrPqCQRclb0wrpuI 0HPs7ORKa2YHAV6AWyRK/rDPtSj7oqY8BcPf0GLAAONJs1VVReCRwIMcJPntKJUs sCwSn5X6i8dUf/fJBIz45dmvQg7lDf33qql+n0sg16Akys4/LrSg0n1nd9rXShqI y/NPoUNi4lVSLtV8OKsjlZ22swSlonDmznODpG1MNx91R5vOSB4OlhTSqKRJvE2Z p0+dHiXOM/qLtVxEG6oj4AF4yOzzSe4Mvpr/jQc79z/2dUic6C1O4OmeBaikUUOZ rMm2lLPbS7ZQsZ1YyPsbrgeF4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPtp51kq GQZPhdLzxbFUewCTmNSMMB8GA1UdIwQYMBaAFERvr5I766+WNXKH/iUJkcdUkUVN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjFDQy8zQUZDMzNFMkVG NjMxMUVGQkY2NEFCNkFDNEY5QUUwMi9SRy12a2p2cnI1WTFjb2YtSlFtUngxU1JS VTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1JHLXZranZycjVZMWNvZi1KUW1SeDFTUlJVMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RjFDQy8zQUZDMzNFMkVGNjMxMUVGQkY2NEFCNkFDNEY5QUUwMi9SRy12a2p2cnI1 WTFjb2YtSlFtUngxU1JSVTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7LxYzCpC5T2lpmyoEVAlEd7akZ07v2Pu+RtD+r/Ab/qakX0vd10cV AerRRNQ6nsLIaX4GNPja95VPydZhG2Z3IRNs5umzK5z3mrB5Upkw3XC9ov6XPvpA ELf4ZZUWkfTCXIimJEEmE8HxUE9h96WA03iph0Z51FrNK2LJWMI9BRtlnw7LZ9Ez JCk7dtMBH3bcSbOC1f7p3yMyztLat4oNfAngjm+yjxc0RtBW77HeAA/3elEjklp+ D3C9BJovel8KioGmAnoyIRkDh914IS0CTQKmOUjnl1igj6FEIGuly+xXb8lKozzh XIFRp9jxsEj4gDY0+zHKheIQ2/Szkt30 -----END CERTIFICATE-----Generated at Wed Nov 5 04:49:48 2025 by rpki-client